Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wh7q-2hgq-2xj7

Опубликовано: 28 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

EPSS

Процентиль: 0%
0.00006
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.7
ubuntu
около 2 лет назад

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

CVSS3: 5.5
redhat
около 2 лет назад

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

CVSS3: 4.7
nvd
около 2 лет назад

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.

CVSS3: 4.7
msrc
около 2 лет назад

Описание отсутствует

CVSS3: 4.7
debian
около 2 лет назад

A flaw was found in the MCTP protocol in the Linux kernel. The functio ...

EPSS

Процентиль: 0%
0.00006
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-416